$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa File: 89f6527b-adbb-4687-9a24-ace3d28006fb.roa (raw, json) Hash identifier: m+p/kTUfZ9nhzxmuEkekkLtj71LCjCnd9ko6tXQwH30= Subject key identifier: 4C:B0:8B:20:8C:DA:47:C6:9F:7B:8B:07:53:CF:65:76:F6:01:EF:AF Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1E79102A56E6B9021FBF50A3D43560953F5006BB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa Signing time: Mon 04 May 2026 15:00:08 +0000 ROA not before: Mon 04 May 2026 15:00:08 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:79:10:2a:56:e6:b9:02:1f:bf:50:a3:d4:35:60:95:3f:50:06:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 4 15:00:08 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=a631b68b78dee458e7853d184587694aa8fb0d68424fb376c57994a6186c9cd5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:88:53:7c:83:1a:c5:1b:7b:d8:bf:b0:57: 87:60:b4:7d:da:a1:9c:4f:73:c5:8c:62:1a:e9:e3: 6d:a7:38:ea:dc:2c:9d:2e:13:f7:9f:5d:2c:65:6b: 7b:ce:b8:99:f0:0d:7d:35:99:a3:d6:3a:b7:fa:39: 9b:1d:8d:c1:c4:11:1e:dd:e5:10:8f:8a:cc:f1:9b: 98:48:e6:f8:bb:55:c0:0e:de:64:a5:51:0b:fa:0d: 5b:72:26:58:17:72:2d:ad:8e:9e:92:24:64:bf:3b: af:cb:a2:7f:5d:d6:bd:7c:a2:05:b0:0d:1d:46:e6: 7a:55:40:60:3d:cb:17:cd:91:4f:82:7f:c9:72:b5: c0:3a:b9:38:4b:ad:51:74:15:32:1f:4f:7f:e2:91: 34:40:ae:b3:af:f3:34:4f:28:02:42:bc:c7:87:d0: a6:d0:c9:3c:c7:94:13:29:b0:77:7a:eb:1a:c7:e8: b1:7e:91:d0:56:a4:fc:eb:53:a3:0e:0d:99:05:b4: 88:8b:5b:47:20:09:30:eb:4f:b8:34:25:f3:9e:a4: bd:58:d8:3e:d7:7c:a6:52:62:04:7d:78:0a:f0:e8: 8c:8b:e2:98:79:5b:44:ee:84:af:35:72:de:ad:aa: 03:98:2d:99:b5:f6:e2:38:80:93:28:01:a8:e8:c4: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:8B:20:8C:DA:47:C6:9F:7B:8B:07:53:CF:65:76:F6:01:EF:AF X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/23 Signature Algorithm: sha256WithRSAEncryption 26:60:5f:04:1a:ec:72:da:ed:71:5f:90:a5:03:8e:7c:89:3d: 45:46:82:43:26:0d:a1:9f:51:28:c8:b3:21:1d:b1:f6:b0:90: a5:e5:62:93:81:cf:dd:47:73:ab:c3:d1:2c:45:d8:aa:91:74: 21:fb:8f:55:3b:bd:f7:60:51:8d:67:28:27:01:bc:5b:1d:18: 95:3b:bc:cc:76:d8:d5:75:b4:fb:28:5b:61:31:fc:de:73:98: 24:fc:b0:c9:60:78:ab:a9:8a:7f:1d:f5:00:27:00:c2:b3:2d: 8b:76:72:b5:e9:e9:ee:77:cb:a2:92:be:63:47:f8:13:42:7f: 81:0e:99:45:95:ab:42:2f:c8:d5:58:12:64:ac:60:3f:65:fc: 02:20:06:8d:69:52:36:5b:ae:01:f8:7f:3a:6b:89:f4:e1:50: 45:89:c7:be:f7:d2:b6:5a:37:cb:6b:02:b9:b4:39:b8:e6:88: 23:02:9a:30:6d:70:db:6b:24:cf:f0:87:65:19:b2:67:7b:c5: 94:57:ea:bc:6c:77:19:92:9b:0d:d2:9f:f2:25:f1:24:80:7f: f3:53:c3:79:47:34:c3:45:b9:f7:48:18:28:fb:9a:84:75:53: 41:b1:db:e5:60:a1:83:e4:9b:fe:55:6c:3a:ea:1a:c5:4f:f7: f1:93:c9:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHnkQKlbmuQIfv1Cj1DVglT9QBrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTA0MTUwMDA4WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjMxYjY4Yjc4ZGVlNDU4ZTc4NTNkMTg0NTg3Njk0YWE4 ZmIwZDY4NDI0ZmIzNzZjNTc5OTRhNjE4NmM5Y2Q1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpPIhTfIMaxRt72L+wV4dgtH3aoZxPc8WMYhrp422nOOrc LJ0uE/efXSxla3vOuJnwDX01maPWOrf6OZsdjcHEER7d5RCPiszxm5hI5vi7VcAO 3mSlUQv6DVtyJlgXci2tjp6SJGS/O6/Lon9d1r18ogWwDR1G5npVQGA9yxfNkU+C f8lytcA6uThLrVF0FTIfT3/ikTRArrOv8zRPKAJCvMeH0KbQyTzHlBMpsHd66xrH 6LF+kdBWpPzrU6MODZkFtIiLW0cgCTDrT7g0JfOepL1Y2D7XfKZSYgR9eArw6IyL 4ph5W0TuhK81ct6tqgOYLZm19uI4gJMoAajoxIKpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTLCLIIzaR8afe4sHU89ldvYB768wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg5ZjY1MjdiLWFkYmItNDY4Ny05YTI0LWFjZTNkMjgwMDZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBAwDQYJKoZIhvcNAQELBQADggEBACZgXwQa7HLa7XFfkKUDjnyJPUVG gkMmDaGfUSjIsyEdsfawkKXlYpOBz91Hc6vD0SxF2KqRdCH7j1U7vfdgUY1nKCcB vFsdGJU7vMx22NV1tPsoW2Ex/N5zmCT8sMlgeKupin8d9QAnAMKzLYt2crXp6e53 y6KSvmNH+BNCf4EOmUWVq0IvyNVYEmSsYD9l/AIgBo1pUjZbrgH4fzprifThUEWJ x7730rZaN8trArm0ObjmiCMCmjBtcNtrJM/wh2UZsmd7xZRX6rxsdxmSmw3Sn/Il 8SSAf/NTw3lHNMNFufdIGCj7moR1U0Gx2+VgoYPkm/5VbDrqGsVP9/GTyRI= -----END CERTIFICATE-----Generated at Wed May 13 03:47:02 2026 by rpki-client